Privacy Policy

1. Scope

This Privacy Policy applies to the Promise applications, website, and related services. It does not govern third-party services that you connect to Promise, such as Google, Microsoft, or Apple; their own policies continue to apply.

2. Information we process

Account and connection information

We process your name, email address, account identifier, subscription tier, and the connection status of services you authorize. OAuth access and refresh tokens are encrypted before storage.

Content you choose to connect or submit

When you connect an email account, Promise processes the messages, headers, participants, timestamps, threads, and attachments needed to provide the service. When you use capture features, we process the transcript and context you submit. Promise requests read-only mailbox access and does not send, delete, or modify email on your behalf.

Derived intelligence

Promise creates structured information from your content, including possible commitments, tasks, dates, people, relationships, preferences, reminders, embeddings, and links back to supporting evidence. Because this information is inferred, it can be incomplete or incorrect.

Technical and usage information

We process operational logs, device and application details, sync state, errors, model usage, token counts, latency, and feature usage needed to secure, operate, troubleshoot, and improve Promise. Model usage records do not contain the prompt or message body.

3. How we use information

We use information only as reasonably necessary to:

• authenticate you and maintain connected accounts;
• ingest, organize, search, summarize, and surface relevant information;
• create reminders and evidence-backed follow-through views;
• operate AI extraction, semantic search, and drafting features;
• prevent abuse and protect the security and reliability of the service;
• provide support and diagnose failed syncs or processing; and
• measure aggregate service performance and cost.

Promise does not sell your personal information. Promise does not use your private content to train shared or public AI models.

4. AI processing and service providers

Promise uses carefully selected infrastructure and service providers to deliver the product. These may include Microsoft Azure for hosting, storage, monitoring, and Azure OpenAI processing; Google or Microsoft for identity and connected mailbox access; and Apple services used by the application on your device.

Providers process data on our behalf or at your direction under their applicable contractual terms. We send AI providers only the content and context needed for the requested feature. We may change providers as the service evolves while maintaining protections appropriate to the sensitivity of the data.

5. Sharing and disclosure

We disclose information only:

• to providers that help us operate Promise;
• when you direct us to or consent to a disclosure;
• to comply with valid legal obligations or protect rights and safety; or
• as part of a merger, financing, acquisition, or sale, subject to appropriate safeguards.

Support access is limited to authorized operators and should occur only when needed to diagnose the service.

6. Retention and deletion

We retain account content and derived intelligence while your account is active and as needed to provide the service. Operational records, backups, security logs, and legally required records may remain for a limited period after deletion. Retention periods may vary by data type and will be shortened when the information is no longer needed.

You may disconnect a provider to stop new synchronization. You may also request deletion of your Promise account and associated content. Deletion from active systems may take time to propagate through encrypted backups.

7. Security

Promise uses safeguards designed for sensitive personal information, including encryption in transit, encrypted OAuth credentials, restricted production access, private data-service networking, and monitored infrastructure. No system is perfectly secure, and we cannot guarantee that unauthorized access will never occur.

8. Your choices and rights

Depending on where you live, you may have rights to access, correct, export, restrict, object to, or delete personal information, and to withdraw consent where processing relies on consent. You may also complain to your local data-protection authority.

We may need to verify your identity before completing a request. Some information may be retained where required for security, legal compliance, or the establishment or defense of legal claims.

9. International processing

Promise and its providers may process information in countries other than the one where you live. Where required, we use appropriate mechanisms intended to protect information transferred across borders.

10. Children

Promise is not directed to children under 16, and we do not knowingly collect personal information from children under 16.

11. Changes and contact

We may update this policy as Promise evolves. We will change the date above and provide additional notice when a change materially affects your rights.

Privacy questions and rights requests may be sent to privacy@usepromise.ai.